Oregon Becomes The Fourth State To Enact A Data Broker Law

Oregon Governor Tina Kotek signed into law the Bill Relating to Registration of Business Entities that Qualify as Data Brokers (HB 2052) (the "Act") on July 27, 2023. Effective January 1, 2024, the Act will require data brokers to annually register with the Oregon Department of Consumer and Business Services (the "Department"). The Act makes Oregon the fourth state to enact a data broker law, following Vermont, California, and Texas.

Under the Act, "data broker" means any business entity or part of a business entity that collects and sells or licenses "brokered personal data" of Oregon residents. The Act defines "brokered personal data" broadly to include any computerized data elements that, alone or in combination with other information the data broker sells or licenses, can reasonably be associated with an identifiable Oregon resident. But the Act's requirements do not apply to any information about the business entity's current or former customers, employees,